diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..d661c83
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+age.agekey
diff --git a/.sops.yaml b/.sops.yaml
new file mode 100644
index 0000000..82b3d9d
--- /dev/null
+++ b/.sops.yaml
@@ -0,0 +1,4 @@
+creation_rules:
+  - path_regex: .*\.sops\.ya?ml
+    encrypted_regex: "^(data|stringData)$"
+    age: age1dfk8euu7afvw7ge5l2qek45z23hdq5anjd56cy4d7kcsf0e0e5pqfjylx8